Known vulnerabilities in Windows Server 2025 10.0.26100.2605 - page 71

Vendor: Microsoft
Software: Windows Server
Version: 2025 10.0.26100.2605
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 1627
Public exploits: 49
Known exploited (KEV): 38
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Windows Server version 2025 10.0.26100.2605 Windows Server 2025 10.0.26100.2605 is affected by 1627 vulnerabilities: 7 critical, 263 high, 300 medium, 1056 low Critical High Medium Low

Vulnerabilities (1627)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107206 - Resource exhaustion
CVE-2025-27485		 CWE-400 High
No
No
 2012 R2 6.3.9600.22523, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040869
#VU107205 - Resource exhaustion
CVE-2025-26680		 CWE-400 High
No
No
 2012 R2 6.3.9600.22523, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040869
#VU107204 - Resource exhaustion
CVE-2025-26652		 CWE-400 High
No
No
 2012 R2 6.3.9600.22523, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040869
#VU107203 - Resource exhaustion
CVE-2025-27470		 CWE-400 High
No
No
 2012 R2 6.3.9600.22523, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040869
#VU107202 - Resource exhaustion
CVE-2025-27486		 CWE-400 High
No
No
 2012 R2 6.3.9600.22523, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040869
#VU107200 - Use After Free
CVE-2025-27476		 CWE-416 Low
No
No
 2012 R2 6.3.9600.22523, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2025 10.0.26100.3775 08.04.2025 SB2025040868
#VU107199 - Use After Free
CVE-2025-27467		 CWE-416 Low
No
No
 2012 R2 6.3.9600.22523, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2025 10.0.26100.3775 08.04.2025 SB2025040868
#VU107198 - Use After Free
CVE-2025-26640		 CWE-416 Low
No
No
 2012 R2 6.3.9600.22523, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2025 10.0.26100.3775 08.04.2025 SB2025040868
#VU107197 - Use After Free
CVE-2025-27730		 CWE-416 Low
No
No
 2012 R2 6.3.9600.22523, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2025 10.0.26100.3775 08.04.2025 SB2025040868
#VU107196 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-21204		 CWE-59 Low
Public exploit available
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040867
#VU107195 - Sensitive Data Storage in Improperly Locked Memory
CVE-2025-27732		 CWE-591 Low
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040866
#VU107194 - Improper input validation
CVE-2025-24058		 CWE-20 Low
No
No
 2012 R2 6.3.9600.22523, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040865
#VU107191 - Use of Uninitialized Resource
CVE-2025-27474		 CWE-908 Medium
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040862
#VU107190 - Exposure of sensitive information to an unauthorized actor
CVE-2025-26667		 CWE-200 Medium
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040862
#VU107189 - Out-of-bounds read
CVE-2025-26672		 CWE-125 Medium
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040862
#VU107188 - Out-of-bounds read
CVE-2025-21203		 CWE-125 Medium
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040862
#VU107187 - Out-of-bounds read
CVE-2025-26664		 CWE-125 Medium
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040862
#VU107186 - Out-of-bounds read
CVE-2025-26669		 CWE-125 Medium
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040862
#VU107185 - Out-of-bounds read
CVE-2025-26676		 CWE-125 Medium
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040862
#VU107184 - Heap-based Buffer Overflow
CVE-2025-26668		 CWE-122 High
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040862


Showing elements 1401 - 1420 out of 1627